Overview

overview

9

Static

static

3

547de41d10...9f.exe

windows7-x64

9

547de41d10...9f.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    547de41d106ae124482dd15b63738c1c7be1068d851e1a94e318667d595ced9f

  • Size

    212KB

  • Sample

    240524-1rdl5scd8y

  • MD5

    8622bee62eae59cc071dd83eacda824f

  • SHA1

    641a6331cfc7d71fa898d35b1f7a81588c68c81b

  • SHA256

    547de41d106ae124482dd15b63738c1c7be1068d851e1a94e318667d595ced9f

  • SHA512

    f486f0355dd392b4b58bdfb54a93ff62625970d1935b72b8bbd41824338d0c076ce481754ea01c1af5605d3f0a038e476e5f9fa2c4f467bee5b58ddd7296df64

  • SSDEEP

    1536:W7ZQpApjIWe+eoO6OA7ZQpApjIWe+eoO6OH:6QWpBe+eoO6OAQWpBe+eoO6OH

Score
9/10
ransomware

Malware Config

Targets

    • Target

      547de41d106ae124482dd15b63738c1c7be1068d851e1a94e318667d595ced9f

    • Size

      212KB

    • MD5

      8622bee62eae59cc071dd83eacda824f

    • SHA1

      641a6331cfc7d71fa898d35b1f7a81588c68c81b

    • SHA256

      547de41d106ae124482dd15b63738c1c7be1068d851e1a94e318667d595ced9f

    • SHA512

      f486f0355dd392b4b58bdfb54a93ff62625970d1935b72b8bbd41824338d0c076ce481754ea01c1af5605d3f0a038e476e5f9fa2c4f467bee5b58ddd7296df64

    • SSDEEP

      1536:W7ZQpApjIWe+eoO6OA7ZQpApjIWe+eoO6OH:6QWpBe+eoO6OAQWpBe+eoO6OH

    Score
    9/10
    ransomware

    • Renames multiple (3672) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks